CVE-2019-9488

Trend Micro Deep Security Manager (10.x, 11.x) and Vulnerability Protection (2.0) are vulnerable to a XML External Entity Attack. However, for the attack to be possible, the attacker must have root/admin access to a protected host which is authorized to communicate with the Deep Security Manager (DSM).

Link	Resource
https://success.trendmicro.com/solution/1122900	Patch Vendor Advisory

Configuration 1

cpe:2.3:a:trendmicro:deep_security_manager:11.3:-:*:*:*:*:*:* cpe:2.3:a:trendmicro:deep_security_manager:11.0:-:*:*:*:*:*:* cpe:2.3:a:trendmicro:deep_security_manager:11.0:u1:*:*:*:*:*:* cpe:2.3:a:trendmicro:deep_security_manager:11.0:u2:*:*:*:*:*:* cpe:2.3:a:trendmicro:deep_security_manager:11.0:u3:*:*:*:*:*:* cpe:2.3:a:trendmicro:deep_security_manager:11.0:u4:*:*:*:*:*:* cpe:2.3:a:trendmicro:deep_security_manager:11.0:u5:*:*:*:*:*:* cpe:2.3:a:trendmicro:deep_security_manager:11.0:u6:*:*:*:*:*:* cpe:2.3:a:trendmicro:deep_security_manager:11.0:u7:*:*:*:*:*:* cpe:2.3:a:trendmicro:deep_security_manager:10.0:-:*:*:*:*:*:* cpe:2.3:a:trendmicro:deep_security_manager:10.0:u1:*:*:*:*:*:* cpe:2.3:a:trendmicro:deep_security_manager:10.0:u2:*:*:*:*:*:* cpe:2.3:a:trendmicro:deep_security_manager:10.0:u3:*:*:*:*:*:* cpe:2.3:a:trendmicro:deep_security_manager:10.0:u4:*:*:*:*:*:* cpe:2.3:a:trendmicro:deep_security_manager:10.0:u5:*:*:*:*:*:* cpe:2.3:a:trendmicro:deep_security_manager:10.0:u6:*:*:*:*:*:* cpe:2.3:a:trendmicro:deep_security_manager:10.0:u7:*:*:*:*:*:* cpe:2.3:a:trendmicro:deep_security_manager:10.0:u8:*:*:*:*:*:* cpe:2.3:a:trendmicro:deep_security_manager:10.0:u9:*:*:*:*:*:* cpe:2.3:a:trendmicro:deep_security_manager:10.0:u10:*:*:*:*:*:* cpe:2.3:a:trendmicro:deep_security_manager:10.0:u11:*:*:*:*:*:* cpe:2.3:a:trendmicro:deep_security_manager:10.0:u12:*:*:*:*:*:* cpe:2.3:a:trendmicro:deep_security_manager:10.0:u13:*:*:*:*:*:* cpe:2.3:a:trendmicro:deep_security_manager:10.0:u14:*:*:*:*:*:* cpe:2.3:a:trendmicro:deep_security_manager:10.0:u15:*:*:*:*:*:* cpe:2.3:a:trendmicro:deep_security_manager:10.0:u16:*:*:*:*:*:* cpe:2.3:a:trendmicro:deep_security_manager:10.0:u17:*:*:*:*:*:* cpe:2.3:a:trendmicro:deep_security_manager:10.0:u18:*:*:*:*:*:* cpe:2.3:a:trendmicro:deep_security_manager:10.0:u19:*:*:*:*:*:* cpe:2.3:a:trendmicro:vulnerability_protection:2.0:-:*:*:*:*:*:*

---

Published : 2019-09-11 06:15

Updated : 2019-09-13 09:11

---

NVD link : CVE-2019-9488

Mitre link : CVE-2019-9488

No products.

CWE-611

Improper Restriction of XML External Entity Reference